mirror/nginx
1
0
Fork 0
mirror of https://github.com/nginx/nginx.git synced 2025-07-27 23:56:18 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

HTTP/3: require that field section base index is not negative.

Browse Source 
RFC 9204 explicitly requires that.
This commit is contained in:
Roman Arutyunyan 2022-05-26 16:17:56 +04:00
parent 9d81ef744c
commit 7123ff2916
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/http/v3/ngx_http_v3_parse.c
View File

@ -474,7 +474,13 @@ done:
} }
if (st->sign) { if (st->sign) {
if (st->insert_count <= st->delta_base) {
ngx_log_error(NGX_LOG_INFO, c->log, 0, "client sent negative base");
return NGX_HTTP_V3_ERR_DECOMPRESSION_FAILED;
}
st->base = st->insert_count - st->delta_base - 1; st->base = st->insert_count - st->delta_base - 1;
} else { } else {
st->base = st->insert_count + st->delta_base; st->base = st->insert_count + st->delta_base;
} }